Expand description
Port for persisting Story 3.5 role delegations.
A delegated assignment is a UserRoleAssignment whose valid_until is
Some(_) and whose delegated_from_user_id is Some(_). The dedicated
port surface is AppError-typed (CRITICAL.md #4) so the use-case never
handles Result<_, String>.